diff --git a/compose.prod.yml b/compose.prod.yml index 4f196a7..1ef15b6 100644 --- a/compose.prod.yml +++ b/compose.prod.yml @@ -8,7 +8,7 @@ services: restart: always labels: - "traefik.enable=true" - - "traefik.http.routers.myapp1.rule=Host(`${APP_HOST}`)" + - "traefik.http.routers.myapp1.rule=Host(`${PORTAL_HOST}`)" - "traefik.http.routers.myapp1.entrypoints=websecure" - "traefik.http.routers.myapp1.tls.certresolver=myresolver" - "traefik.http.services.flask.loadbalancer.server.port=8001" diff --git a/init-letsencrypt.sh b/init-letsencrypt.sh deleted file mode 100755 index 19b353e..0000000 --- a/init-letsencrypt.sh +++ /dev/null @@ -1,80 +0,0 @@ -#!/bin/bash - -if ! [ -x "$(command -v docker compose)" ]; then - echo 'Error: docker-compose is not installed.' >&2 - exit 1 -fi - -domains=(taibol.biodiv.tw) -rsa_key_size=4096 -data_path="../naturedb-volumes/certbot" -email="" # Adding a valid address is strongly recommended -staging=0 # Set to 1 if you're testing your setup to avoid hitting request limits - -if [ -d "$data_path" ]; then - read -p "Existing data found for $domains. Continue and replace existing certificate? (y/N) " decision - if [ "$decision" != "Y" ] && [ "$decision" != "y" ]; then - exit - fi -fi - - -if [ ! -e "$data_path/conf/options-ssl-nginx.conf" ] || [ ! -e "$data_path/conf/ssl-dhparams.pem" ]; then - echo "### Downloading recommended TLS parameters ..." - mkdir -p "$data_path/conf" - curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf > "$data_path/conf/options-ssl-nginx.conf" - curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/certbot/ssl-dhparams.pem > "$data_path/conf/ssl-dhparams.pem" - echo -fi - -echo "### Creating dummy certificate for $domains ..." -path="/etc/letsencrypt/live/$domains" -mkdir -p "$data_path/conf/live/$domains" -sudo docker compose -f compose.yml -f compose.prod.yml run --rm --entrypoint "\ - openssl req -x509 -nodes -newkey rsa:$rsa_key_size -days 1\ - -keyout '$path/privkey.pem' \ - -out '$path/fullchain.pem' \ - -subj '/CN=localhost'" certbot -echo - - -echo "### Starting nginx ..." -sudo docker compose -f compose.yml -f compose.prod.yml up --force-recreate -d nginx -echo - -echo "### Deleting dummy certificate for $domains ..." -sudo docker compose -f compose.yml -f compose.prod.yml run --rm --entrypoint "\ - rm -Rf /etc/letsencrypt/live/$domains && \ - rm -Rf /etc/letsencrypt/archive/$domains && \ - rm -Rf /etc/letsencrypt/renewal/$domains.conf" certbot -echo - - -echo "### Requesting Let's Encrypt certificate for $domains ..." -#Join $domains to -d args -domain_args="" -for domain in "${domains[@]}"; do - domain_args="$domain_args -d $domain" -done - -# Select appropriate email arg -case "$email" in - "") email_arg="--register-unsafely-without-email" ;; - *) email_arg="--email $email" ;; -esac - -# Enable staging mode if needed -if [ $staging != "0" ]; then staging_arg="--staging"; fi - -sudo docker compose -f compose.yml -f compose.prod.yml run --rm --entrypoint "\ - certbot certonly --webroot -w /var/www/certbot \ - $staging_arg \ - $email_arg \ - $domain_args \ - --rsa-key-size $rsa_key_size \ - --agree-tos \ - --force-renewal" certbot -v -echo - -echo "### Reloading nginx ..." -sudo docker compose -f compose.yml -f compose.prod.yml exec nginx nginx -s reload